WAC vs. Object capabilities

I have voiced my reserve with regards to signatures more clearly here: